agent-availability-report
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script uses
execFileto runnpmandnodecommands to verify package availability, check metadata, and perform installation tests. - [EXTERNAL_DOWNLOADS]: The skill downloads and installs specific vendor-owned packages (
@nvidia-elements/*) from the official npm registry for verification purposes. - [DYNAMIC_EXECUTION]: The script generates a temporary JavaScript file (
resolve-check.mjs) to verify that the installed packages can be correctly resolved by the Node.js runtime environment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, including npm registry metadata and documentation site content. It includes safeguards such as limiting output length and performing keyword verification to ensure the documentation content matches the expected vendor products.
Audit Metadata